Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Our summary
Attackers hijacked refrigeration controllers at over 700 supermarkets and food retailers across France and other EU countries this week, pushing freezer temperatures up to 50°C and ruining stock, with Intermarché alone reporting tens of millions of euros in losses. The intrusions exploited long-unpatched firmware on Danfoss AK-SM 800A and its discontinued predecessor AK-SC355, tied to vulnerabilities CVE-2025-41450, CVE-2025-41452 and CVE-2025-41452, disclosed by Claroty's Team82 back in August, while France's CERT-FR also flagged involvement of Dixell/Copeland's XWEB platform. Attackers reportedly stretched defrost cycles to disguise the dangerous warming as routine maintenance, and researchers found thousands of these controllers still exposed directly to the internet, around 1,500 in France alone. The incident, possibly linked to similar unexplained freezer failures at US military bases in August, underscores how third-party OT access and unpatched legacy equipment can let attackers remotely sabotage critical retail infrastructure.
Dark Reading publishes this story on its own site; we link to it rather than reprint it.
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.